To be considered PCI compliant, businesses must build and maintain a secure network, protect cardholder data, implement strong access control procedures and take other key measures for information security. 

Every business that works with credit card information is required to comply with the Payment Card Industry Data Security Standards (PCI DSS) to prevent cardholder data theft. The specific PCI DSS requirements that apply to your company depend on your card-handling practices and the number of card transactions you process.

Complying is good business. It can help reduce your company’s risk of credit card fraud and data breaches. As security threats become more sophisticated and businesses struggle to keep up, M&T Bank’s PCI compliance services provide practical help and peace of mind.

To self-assess your PCI compliance, you’ll need to follow 12 primary PCI DSS controls that address your system security and cardholder data protection. A modern POS system will include security features that will help you stay compliant without the need for continuous self-monitoring.

Every business that works with credit card information is required to comply with the Payment Card Industry Data Security Standards (PCI DSS) to prevent cardholder data theft. To be considered compliant, businesses must build and maintain a secure network, protect cardholder data, implement strong access control procedures and take other key measures for information security.

A robust POS system will include credit card encryption and tokenization and remove your need to store credit card information. Additional best practices include the maintenance of a firewall, unique passwords and restricted access to physical devices.

For most businesses, there are 12 primary PCI DSS controls to implement. They are divided into six sections and address the security of networks and systems, protection of payment card and cardholder data, system vulnerability management, access control, activity assessment and the maintenance of an in-house security policy. Depending on your business type and your credit card transaction volume, you could be subject to additional control requirements.

Complying with PCI DSS means establishing serious card data security and takes a multifaceted effort. M&T Bank can help. Our solutions include an external vulnerability scan and an online compliance reporting portal, as well as breach protection and reimbursement in case of a data breach. Get PCI compliance services that provide practical help and peace of mind.